PT-2023-6314 · Hewlett Packard · Hp Thinupdate Utility

CVE-2023-4499 · Publicado 2023-10-13 · Atualizado 2023-10-19

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) (affected versions not specified)

Description A potential security issue has been identified in the HP ThinUpdate utility, which may lead to information disclosure. This issue is related to insufficient protection of internal data. An attacker, acting remotely, could exploit this issue to gain unauthorized access to protected information. HP is releasing mitigation for the potential issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Improper Certificate Validation

Enumeração de Fraquezas

CWE-200

CWE-295

Identificadores relacionados

BDU:2023-07025

CVE-2023-4499

Produtos afetados

Hp Thinupdate Utility

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-4499 · Nota de Segurança
• https://twitter.com/IT_securitynews/status/1714212945540927495 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-07025 · Nota de Segurança
• https://github.com/advisories/GHSA-f5q5-79ff-jh27 · Nota
• https://t.me/cibsecurity/72265 · Publicação no Telegram
• https://support.hp.com/us-en/document/ish_9440593-9440618-16 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-4499 · Aviso do Fabricante
• https://vuldb.com/ru/?id.242138 · Nota
• https://t.me/cvenotify/59469 · Publicação no Telegram